Data management system and method

ABSTRACT

A management system manages data collected at a selected frequency and data collected at a lower frequency. If the lower frequency data is abnormal, it is deleted. Deletion of the data collected at the specified frequency is dependent upon the deletion of the data collected less frequently.

CROSS-REFERENCE TO PRIOR APPLICATION

This application relates to and claims priority from Japanese PatentApplication No. 2004-267807, filed on Sep. 15, 2004, the entiredisclosure of which is incorporated herein by reference.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a computer technology for managingdata.

2. Description of the Related Art

Computer technology for managing data is known. As managed data, datathat represents the results of monitoring by the performance monitoringdevice disclosed by Japanese Patent Application Laid Open No. 2002-99448or data that represents the results of monitoring various states ofcomputer machines, and so forth, may be considered, for example.

For example, cases may include one where a monitoring device thatmonitors a state of a certain kind of a computer machine (the CPU usagerate, for example) generates a record that represents the results ofthis monitoring (‘monitoring result record’ hereinbelow) at regularintervals and manages the monitoring result records thus generated.Further, there can also be cases where a monitoring device generates asummary record that represents a summary of a plurality of monitoringresults represented by a plurality of monitoring result records atregular intervals and manages the summary records thus generatedtogether with the plurality of monitoring result records that form thebasis of these summary records. In this case, in order to prevent themanaged record group from becoming huge, a method according to which themonitoring device manages the monitoring result records that aregenerated in each first time unit (every minute, for example) in a firstperiod and deletes monitoring result records if the first period isexceeded, and manages summary records that are generated in each secondtime unit (every hour, for example) that is greater than the first timeunit in a second period that is longer than the first period and deletessummary records if the second period is exceeded may be considered.

However, with this method, in cases where the monitoring device detectsa summary record representing a unique monitoring result and there isthe desire to acquire a plurality of monitoring result records that formthe basis of the summary record, for example, sometimes at least one ofthe plurality of monitoring result records that is to be acquired hasalready been deleted. When the management period of the monitoringresult record is extended, for example, in order to avoid this problem,there is then a large volume of record groups to be managed.

This problem is not limited to a case where a plurality of monitoringresult records and summary records are managed and can arise in a casewhere a data group, which includes a plurality of lower level data andupper level data for each of this plurality of lower level data, ismanaged.

SUMMARY OF THE INVENTION

Therefore, an object of the present invention is to manage efficiently adata group that includes a plurality of lower level data and upper leveldata for each of the plurality of lower level data. More specifically,for example, an object of the present invention is to manage efficientlya record group that includes a plurality of monitoring result recordsand summary records that are generated on the basis of the plurality ofmonitoring result records.

Further objects will become evident from the following description.

A data management system according to a first aspect of the presentinvention is capable of accessing a storage device and comprises one ormore processors, and a storage region for storing one or more computerprograms that allow the one or more processors to operate as a result ofbeing read by the one or more processors. The one or more processors,which read the one or more computer programs from the storage region,perform processes (A) to (D) below:

(A) processing to acquire, at a first frequency, monitoring result datathat represents monitoring results for a monitoring target, generate amonitoring result record that includes the monitoring result data thusacquired and first deletion condition data that represents a firstdeletion condition for the monitoring result data, and store thegenerated monitoring result record in the storage device;

(B) processing to generate monitoring result summary data thatrepresents a summary of a plurality of monitoring results represented bya plurality of the monitoring result record stored in the storage deviceat a second frequency that is lower than the first frequency, determinea second deletion condition for normal state when the content of thesummary of the plurality of monitoring results represents normal contentand determine a second deletion condition for abnormal state when thesummary content represents abnormal content, generate a summary recordthat includes second deletion condition data that represents the seconddeletion condition thus determined and the monitoring result summarydata thus generated, and then store the generated summary record in thestorage device;

(C) processing to specify a summary record including second deletioncondition data representing the second deletion condition for abnormalstate from the storage device and specify a plurality of the monitoringresult records that form the basis of the generation of the specifiedsummary record; and

(D) processing to update the first deletion condition that isrepresented by the first deletion condition data of each of theplurality of monitoring result records thus specified to a seconddeletion condition for abnormal state that is represented by the seconddeletion condition data included in the specified summary record.

Here, the ‘monitoring target’ is a target that is monitored by the datamanagement system or another system, such as the CPU usage rate or powersupply state of a computer machine, for example. The monitoring targetmay be either inside or outside the data management system.

The ‘monitoring result data’ may be generated by the one or moreprocessors or may be received from a system outside the data managementsystem.

The ‘frequency’ is the number of times that data is acquired within acertain period, for example. More specifically, when the data isacquired at regular intervals, for example, ‘frequency’ may mean ‘timeunit’.

The data management system can be constituted by a server or storagedevice, or by a combination thereof, for example. Processes (A) to (D)above can be performed singly by the server or storage device or can beshared by the server and storage device. The storage device may also beprovided in the server. The storage device may be a physical storagedevice or a logical storage device. In addition, the data managementprocessing system may delete a monitoring result record from the storagedevice in accordance with deletion condition data that is contained inthe monitoring result record. This process can also be performed singlyby the server or storage device, for example.

A data management system according to a second aspect of the presentinvention can comprise a lower level data acquisition/storage portion,an upper level data acquisition/storage portion, a first deletioncondition setting portion, and a second deletion condition settingportion. The lower level data acquisition/storage portion acquires lowerlevel data at a first frequency and stores the acquired lower level datain the storage device. The upper level data acquisition/storage portionacquires upper level data that is data above each of a plurality of thelower level data stored in the storage device at a second frequency thatis lower than the first frequency and stores the upper level data thusacquired in the storage device. The first deletion condition settingportion sets, when the upper level data represents an abnormal state, adeletion condition from the storage device of the upper level datarepresenting an abnormal state. The second deletion condition settingportion sets a deletion condition for each of a plurality of lower leveldata corresponding with the upper level data representing an abnormalstate as a deletion condition that differs from the deletion conditionof the lower level data representing a normal state, on the basis of theset deletion condition of the upper level data representing an abnormalstate.

In cases where the deletion condition of the upper level datarepresenting an abnormal state is set, for example, the data managementsystem may determine the method for updating the deletion conditions ofthe plurality of lower level data corresponding with the upper leveldata on the basis of a pre-established rule for setting a deletioncondition. Update methods include, for example, a method that applies adeletion condition that is the same as the deletion condition of theupper level data to the lower level data or a method that calculates thedeletion condition of the upper level data representing an abnormalstate as another deletion condition by means of a predetermined methodand applies this other deletion condition.

In a first embodiment of the data management system, the deletioncondition includes a deletion time at which data is deleted from thestorage device. The first deletion condition setting portion sets, asthe deletion time of upper level data representing an abnormal state, adeletion time that is later than the deletion time of upper level datarepresenting a normal state. The second deletion condition settingportion sets the deletion times of each of the plurality of lower leveldata as deletion times that are later than the deletion times of thelower level data representing a normal state. Further, as a method forsetting the deletion time of lower level data to a later deletion time,for example, a method that sets and corrects the lower-level datadeletion time itself to a later deletion time or adds adeletion-condition extension period without changing the content of theoriginal deletion time may be considered. Further, the ‘deletion time’may be expressed as a storage period or as the time at which the storageperiod ends, for example.

In a second embodiment of the data management system, according to thefirst embodiment, the lower level data acquisition/storage portiongenerates a lower level record that includes second deletion time datarepresenting a second deletion time of the acquired lower level data andthe acquired lower level data and stores the lower level record thusgenerated in the storage device. The first deletion time setting portionsets a first deletion time for normal state that represents the deletiontime of the upper level data representing a normal state and sets afirst deletion time for abnormal state that represents the deletion timeof the upper level data representing an abnormal state. The upper leveldata acquisition/storage portion generates an upper level record thatincludes first deletion time data that represents the set first deletiontime and the acquired upper level data and stores the generated upperlevel record in the storage device. When the first deletion time data inthe upper level record represents the first deletion time for abnormalstate, the second deletion time setting portion changes the seconddeletion time represented by the second deletion time data of each ofthe plurality of lower level records corresponding with the upper levelrecord representing an abnormal state to a later deletion time on thebasis of the first deletion time for abnormal state.

In a third embodiment of the data management system, according to thesecond embodiment, in certain lower level data among a plurality oflower level data corresponding with the upper level record representingan abnormal state, the second deletion time setting portion keeps thesecond deletion time as is when the second deletion time represented bythe second deletion time data is later than the first deletion time forabnormal state.

In a fourth embodiment of the data management system, the datamanagement system is also able to access another storage device andfurther comprises a data deletion/shift portion that deletes or shiftsdata. The data deletion/shift portion deletes the upper level datarepresenting a normal state and each of the plurality of lower leveldata corresponding with the upper level data from the storage devicewhen the deletion conditions of the data are matched, and shifts atleast one of the upper level data representing an abnormal state and theplurality of lower level data corresponding with the upper level datafrom the storage device to the other storage device when the deletionconditions of the data are matched. According to this embodiment, forexample, the data processing system may comprise the storage device oranother storage device may be provided outside the data processingsystem. Further, the storage device may be a high-performance orhigh-reliability device, while the other storage device may be alower-performance or lower-reliability device.

A data management method according to a third aspect of the presentinvention comprises the steps of acquiring lower level data at a firstfrequency and storing the acquired lower level data in a storage device;acquiring upper level data that is data above each of a plurality of thelower level data stored in the storage device at a second frequency thatis lower than the first frequency and storing the upper level data thusacquired in the storage device; setting, when the upper level datarepresents an abnormal state, a deletion condition from the storagedevice of the upper level data representing an abnormal state; andsetting a deletion condition for each of a plurality of lower level datacorresponding with the upper level data representing an abnormal stateas a deletion condition that differs from the deletion condition of thelower level data representing a normal state, on the basis of the setdeletion condition of the upper level data representing an abnormalstate. All the main constituents of these steps can be computers.

A computer program according to a fourth aspect of the present inventionis a computer-readable computer program that allows a computer toexecute the steps of acquiring lower level data at a first frequency andstoring the acquired lower level data in a storage device; acquiringupper level data that is data above each of a plurality of the lowerlevel data stored in the storage device at a second frequency that islower than the first frequency and storing the upper level data thusacquired in the storage device; setting, when the upper level datarepresents an abnormal state, a deletion condition from the storagedevice of the upper level data representing an abnormal state; andsetting a deletion condition for each of a plurality of lower level datacorresponding with the upper level data representing an abnormal stateas a deletion condition that differs from the deletion condition of thelower level data representing a normal state, on the basis of the setdeletion condition of the upper level data representing an abnormalstate. This computer program may be recorded on a recording medium (aCD-ROM, for example) and installed on a computer from the recordingmedium, or may be installed on the computer via a communication network.

According to the present invention, a data group, which includes aplurality of lower level data and upper level data for each of theplurality of lower level data, can be efficiently managed.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 shows a constitutional example of the data management systemaccording to the first embodiment of the present invention;

FIG. 2 schematically shows the principal parts according to thisembodiment in the data management system shown in FIG. 1;

FIG. 3A shows a constitutional example of performance information;

FIG. 3B shows a constitutional example of a performance record;

FIG. 4A shows an outline of a method for generating a deletioncondition;

FIG. 4B shows an outline of a method for generating a summary record;

FIG. 5 shows an example of the flow of processing that is executed by aserver program;

FIGS. 6A and 6B show an example of an aspect in which a deletioncondition for an upper level record representing an abnormal state isreflected in a lower level record;

FIG. 6C represents a modified example thereof; and

FIG. 7 shows a modified example of the server program according to anembodiment of the present invention as well as an example of the flow ofprocessing that is executed by the server program.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

An embodiment of the present invention will be described hereinbelowwith reference to the drawings.

FIG. 1 shows a constitutional example of a data management systemaccording to an embodiment of the present invention.

A client machine 1, a performance monitoring server 2, and a storagesystem 43 are connected to a first communication network such as a LAN(Local Area Network) 27. The client machine 1, performance monitoringserver 2, and storage system 43 are also connected to a secondcommunication network such as a SAN (Storage Area Network) 41.

The client machine 1 is an information processing device such as apersonal computer, for example. The client machine 1 comprises a clientprocessor (CPU, for example) 73 and a client memory portion (at leastone of a memory and hard disk, for example) 72. A client program 11 isstored in the client memory portion 72. The information processingdevice functions as the client machine 1 as a result of the clientprogram 11 that is stored in the client memory portion 72 being read tothe client processor 73. The client program 11 may be applicationsoftware, which operates on an operating system (OS) (not shown) of theclient machine 1 or may be integrated into the OS.

The performance monitoring server 2 is one information processing devicethat comprises a server memory portion 4 and a server processor 74 (aCPU, for example), for example. The server memory portion 4 comprises atleast one of a memory (RAM, ROM, or the like, for example) and a harddisk. A server program 12, for example, is recorded on the server memoryportion 4. The server program 12 is at least one program module thatcomprises a performance monitoring portion 32, a performance dataacquisition portion 35, and a performance data storage portion 90, forexample. The information processing device functions as a performancemonitoring server 2 as a result of a server program 33 stored in theserver memory portion 4 being read by the server processor 74. Forexample, the performance monitoring server 2 is able to monitor thefluctuating performance of a certain device (the CPU usage rate, forexample) and generate data that represents this monitored state (called‘performance data’ hereinbelow). Performance data can be data thatrepresents the performance of each OS, application program or database,for example. More specifically, for example, the performance data may beat least one of the CPU usage rate of the OS, the number of runningprocesses of the OS, the database usage rate, SQL information, parameterinformation, application roll area usage rate and the response time. Atleast one of the monitored OS, application program and database mayexist in the performance monitoring server 2 or may exist in a deviceoutside the server 2 (in client machine 1 or storage system 43, forexample). The performance monitoring server 2 may generate performancedata on the basis of the performance monitoring results or may receiveperformance data via the LAN 27 or the like from a monitoring targetthat exists outside the server 2.

The storage system 43 is a RAID (Redundant Array of IndependentInexpensive Disks) system that is constituted with a plurality ofdisk-type storage devices (hard disk drives, for example) 77 arranged inthe form of an array, for example. The storage system 43 comprises aplurality of logical volumes provided in one or more disk-type storagedevices 77 and a storage control device 45 that controls communicationsbetween at least one of the client machine 1 and the performancemonitoring server 2 (generically termed ‘upper level device’hereinbelow) and the plurality of logical volumes.

The plurality of logical volumes includes, for example, a logical volume(performance information VOL) 47 in which performance information 10containing one or more performance data items are stored and a logicalvolume (definition VOL) 49 in which data management definitioninformation 42 is stored. Further, at least one of these logical volumes47 and 49 may be provided in a server memory portion 35. That is,performance data acquired by the performance monitoring server 2 may besaved in the server memory portion 4 of the performance monitoringserver 2 in place of or in addition to being saved in the disk-typestorage device 77 of the storage system 43.

The storage control device 45 comprises, for example, one or moreprocessors (MPU (Micro Processing Units) or CPU (Central ProcessingUnit), for example) 95 that execute processing and so forthcorresponding with a variety of commands from an upper level device, amemory 94 that comprises a buffer region or the like in which datareceived from the upper level device is temporarily stored, and a diskinterface device (disk I/F hereinbelow) 93 that is an interface for thedisk-type storage device 77. In response to an I/O request (a readcommand or write command, for example) from the upper level device, thestorage control device 45 is able to write information received from theupper level device to a logical volume and transfer the information inthe logical volume to the upper level device.

FIG. 2 provides an outline of the principal parts of this embodiment inthe data management system shown in FIG. 1.

As indicated by the solid line arrow 101, the client program 11 asks theserver program 12 to reference performance information. In response tothis request, the performance data acquisition portion 35 of the serverprogram 12 accesses the performance information VOL 47 as indicated bythe solid line arrow 108 and reads out all or part of the performanceinformation 10 as indicated by the dotted line arrow 109. Theperformance data acquisition portion 35 transmits all or part of theperformance information 10 thus read to the client program 11 asindicated by the dotted-line arrow 102. Further, the part of theperformance information 10 that is read out or transmitted can be aperformance record, all or part of performance minute records, all orpart of performance hour records, all or part of performance dayrecords, or can be a combination of these records. A description of theperformance records will be provided below.

The performance monitoring portion 32 acquires performance data(generates or receives from outside, for example) and passes theacquired performance data to the performance data storage portion 90 asindicated by the arrow 103. The performance monitoring portion 32acquires performance data in minute units, for example, at regularintervals (or irregular intervals).

When performance data is passed from the performance monitoring portion32, the performance data storage portion 90 detects the time at thispoint (detects the time by using a timer in the server 2, for example).Alternatively, the performance data storage portion 90 detects the timewhen performance data described subsequently is generated. As indicatedby the solid line arrow 104, the performance data storage portion 90accesses the definition VOL 49 and acquires all or part of datamanagement definition information 34 as indicated by the dotted linearrow 110. The performance data storage portion 90 generates deletioncondition data representing a deletion condition on the basis ofperformance data that is relayed from the performance monitoring unit 32and the acquired data management definition information 34. Theperformance data storage portion 90 generates a performance record thatincludes performance data, collection time data representing thedetected time (hereinafter ‘collection time’), and the generateddeletion condition data and, as indicated by the solid line arrow 105,stores the generated performance record in the performance informationVOL 47. Further, as indicated by the same arrow 105, the performancedata storage portion 90 is able to update or delete the main performancerecord of the performance information 10 in the performance informationVOL 47. Further, as indicated by the solid line arrow 106, theperformance data storage portion 90 accesses the performance informationVOL 47 and, as indicated by the dotted line arrow 107, is also able toread all or part of the performance information 10. The performance datastorage portion 90 comprises a performance record creation and storageportion 90A, a summary record creation and storage portion 90B, and arecord deletion portion 90C. Each of these 90A, 90B, and 90C are programmodules, for example. The processing performed by each of the 90A, 90Band 90C will be described subsequently.

The performance information 10 is information including a plurality ofperformance records. FIG. 3A shows a constitutional example of theperformance information 10. The region in which the performanceinformation 10 is stored is divided into a plurality of subregions. Eachof the plurality of subregions corresponds with performance records of aplurality of types, for example. The type of performance record differsdepending on what kind of time unit among a plurality of time units towhich this record relates.

More specifically, for example, the performance records of a pluralityof types include a performance record that is generated in minute units(‘minute record’ hereinbelow) 13A, a performance summary record (‘hourrecord’ hereinbelow) 13B that summarizes minute records corresponding toa certain hour (sixty minute records, for example) and a performancesummary record (‘day record’ hereinbelow) 13C that summarizes hourrecords corresponding to a certain day (twenty-four hour records, forexample). The day record 13C is an upper level record, the hour record13B is a record one level below the day record 13C and the minute record13A is a record that is one level below the hour record 13B.

The plurality of subregions include a minute record table 10A in whichone or more minute records 13A are stored, an hour record table 10B inwhich one or more hour records 13B are stored, and a day record table10C in which one or more day records 13C are stored. Each of theperformance records 13A to 13C of the plurality of types registered inthe plurality of tables 10A to 10C is associated with a record that isabove or below itself. The server program 12 is able to grasp whichupper or lower level record a certain performance record is associatedwith by referencing collection time data in the respective collectiontime fields of the certain performance record and of the upper or lowerlevel performance records thereof respectively, for example. Morespecifically, it can be seen that the minute record 13A, for which thecollection time is zero to fifty-nine minutes past h (hour), correspondswith the hour record 13B, for which the collection time data is h hoursand zero minutes, and that the hour record, for which the collectiontime data is d days and zero to twenty-three hours, corresponds with theday record 13C for which the collection time is d days, zero hours, andzero minutes, for example. Further, the time unit levels may be in feweror more levels than the three levels of minutes, hours and days. In thiscase also, the above procedure of grasping the relationship ofcorrespondence from collection time data can be adopted.

FIG. 3B shows a constitutional example of a performance record.

A performance record 13 includes a collection time field 18A in whichperformance time data is registered, a deletion condition field 18B inwhich deletion condition data is registered, and a performance datafield 18C in which performance data is registered. The performance datafield 18C may comprise one or more subdata fields 14, 14, . . . in whichone or more performance data elements constituting performance data areeach registered. Performance data elements can be the CPU usage rate,the number of paging instances, and so forth.

The constitution of the performance record 13 can be the sameirrespective of the type of performance record 13. For example, theperformance data storage portion 90 is able to register datarepresenting the collection time (year/month/day/hour/minutes, forexample) of the minute record 13A in the collection time field 18A ofthe minute record 13A, register data (year/month/day/hour/minutes, forexample) representing an hour record that is generated on the basis of aplurality of minutes records 13A of a collection time at a certain hourin the collection time field 18A of the hour record 13B, and registerdata representing a day record that is generated on the basis of aplurality of hour records 13B with a collection time of a certain day(year/month/day, for example) in the collection time field 18A of theday record 13C. The server program 12 is able to grasp which upper orlower level record a certain performance record is associated with andgrasp that there is a relationship of correspondence as illustrated bythe dotted line in FIG. 3A, for example, by referencing the collectiontime data in the collection time field of the certain performance recordand the upper and lower level performance records thereof respectively.

Let us now refer to FIG. 2 once again.

The data management definition information 34 is information relating tothe definition of the data management method (a data or computerprogram, for example). The data management definition information 34includes deletion condition definition information 36 and summarydefinition information 33.

The deletion condition definition information 36 is data or a computerprogram in which rules for setting deletion conditions are defined. Morespecifically, for example, the deletion condition definition information36 is a program (script) that generates a storage deadline or the likefor the performance record from at least one performance data elementthat is included in the performance data. For example, when theperformance data element represents the CPU usage rate, in order togenerate the deletion condition that ‘the storage period of aperformance record for which it is detected that the variation in theCPU usage rate exceeds 50% should be one month and the storage period ofa performance record for which it is detected that the variation in theCPU usage rate is 50% or less should be two months’, the script image isas follows: if (abs(CPU %−CPU %[−1])>50) return “storage period >onemonth” else return “storage period >2 days”. As shown in FIG. 4A, theserver program 12 is able to generate a deletion condition byreferencing such deletion condition definition information 36 andperformance data and then set data for the generated deletion conditionin a performance record. Further, when a deletion condition for an upperlevel performance record is generated, the deletion condition can bereflected in at least one lower level performance record thatcorresponds with the upper level performance record.

The deletion condition definition information 36 can be of variedcontent. For example, when performance data elements of a plurality oftypes are included in the performance data, the rules for setting thestorage periods for each type of performance data element can be definedand have content such that the longest storage period is then thedeletion condition that is ultimately registered in the deletioncondition field. Further, the deletion condition definition information36 may include an information element that represents a rule for settingdeletion conditions by performance record types. For example, deletioncondition definition information elements for an upper level performancerecord may include data or a program that represents not only a rule forsetting a deletion condition for this performance record but also a ruleregarding the way in which the deletion condition is to be reflected inthe performance record below this performance record (for example, as towhether to establish a deletion condition that is the same as thedeletion condition of the upper level performance record for the lowerlevel performance record corresponding with this performance record orto calculate the deletion condition of the upper level performancerecord as another deletion condition by means of a predetermined methodand then establish this other deletion condition). More specifically,for example, hour-record deletion condition definition informationelements may include the deletion condition “storage period >1 month”,which is set for an hour record in the case of data representing thefact that the ‘CPU usage rate of the hour record exceeds 60%’, and thedeletion condition “and not exists (upper level record)”, which is addedto the corresponding lower-level minute record. In this case, when“storage period >one day”, for example, has been registered in thedeletion condition field of the original minute record, content such as“storage period >1 day and not exists (upper level record)”, that is,‘[the lower level record] is saved until the upper level record isdeleted when the storage period exceeds one day’ is newly registered inthe deletion field.

The summary definition information 33 is data or a program whereby amethod for creating upper level data from a plurality of lower leveldata is defined. The summary definition information 33 includes, forexample, information elements representing a summary timing definitionand information elements representing a summary method definition, forexample.

As a summary timing definition, in the case of the definition of aminute record, for example, a definition regarding whether to createupper summary data (hour data) every minute or to create upper summarydata every hour can be adopted. Further, when upper summary data iscreated every minute, the number of minute records and the number ofhour records are the same. In this case, one lower level recordcorresponds with a plurality of upper level records. At such time, whentwo or more upper level records among the plurality of upper levelrecords are upper level records that represent an abnormal state, two ormore deletion conditions can be reflected in the lower level record onthe basis of the two or more upper level records. In this case, adeletion condition that the time for deletion should be the most remotetime among the two or more deletion conditions may be selected andreflected in the lower level record.

As a summary method definition, for example, a definition that sets anyof the average value, total value, maximum value or minimum value of theplurality of performance data corresponding with the plurality of lowerlevel data as the performance data of the upper level data can beadopted. Further, this summary method definition can be established bythe type of performance data element. For example, the summary methodmay be established so that the average value is adopted when theperformance data element is the CPU usage rate or the total value isadopted when the performance data element is the access frequency.

The server program 12 can generate an upper level record (hour record,for example) from a plurality of lower level records (minute records,for example) as shown in FIG. 4B, for example, by referencing suchsummary definition information 33.

FIG. 5 shows an example of the flow of processing that is executed bythe server program 12.

First, the processing to store the minute record 13A will be described.

The performance record creation and storage portion 90A acquires aminute record in which the deletion condition field 18B is blank (stepS101). Here, for example, the performance record creation and storageportion 90A may receive this minute record from the performancemonitoring portion 32 or may generate this minute record on the basis ofthe performance data received from the performance monitoring portion 32and the collection time of this performance data.

The performance record creation and storage portion 90A generates adeletion condition that conforms with the content of the performancedata on the basis of the performance data in the minute record acquiredin S101 and the deletion condition definition information 33, sets datarepresenting the generated deletion condition in the blank performancecondition field 18B in the minute record acquired in S101, and thenstores this minute record in the performance information VOL 47 (S102).

The summary record creation and storage portion 90B references thecollection time data in the minute record in the performance informationVOL 47 and the summary definition information 33 in the definition VOL49 and judges whether this is the summary timing for the minute record(S103). When an affirmative judgment result is obtained in theprocessing of S103, the summary record creation and storage portion 90Bcauses the performance record creation and storage portion 90A to startthe processing of S201 (S104).

The record deletion portion 90C references deletion condition data ineach minute record within the performance information VOL 47 and, ifthis point in time matches the deletion condition represented by thedeletion condition data (if the difference between the minute recordcollection time and the current time is greater than the storagedeadlines set as the deletion condition, for example) the recorddeletion portion 90C then deletes the minute record containing thedeletion condition data (S105). The record deletion portion 90C is ableto execute the processing of S105 at regular intervals (or irregularintervals).

Next, the summary record storage processing will be described.

The performance record creation and storage portion 90A references thesummary definition information 33 in the definition VOL 49, specifies arange of lower level records (minute records or hour records, forexample), which form the basis of the summary record that is to becreated, from this information 33, and creates a summary record (hourrecord or day record, for example) in which the deletion condition field18B is blank on the basis of the lower level records in the specifiedrange and the summary definition information 33(S201).

The performance record creation and storage portion 90A generates adeletion condition that conforms with the content of the performancedata on the basis of the performance data in the summary record createdin S201 and the deletion condition definition information 33, sets datarepresenting the generated deletion condition in the blank performancecondition field 18B in the summary record created in S201, and thenstores the summary record in the performance information VOL 47 (S202).Further, thereupon, the performance record creation and storage portion90A is able to update, on the basis of the deletion condition definitioninformation 33, the deletion condition of at least one lower levelrecord corresponding with the summary record to a new deletion conditionaccording to which deletion is performed at a later time than the timeat which deletion is executed according to the former deletioncondition. As the update method, a method that rewrites the deletioncondition data of the lower level record with other deletion conditiondata or a method that adds new deletion condition data to the deletioncondition field 18B of the lower level record, for example, can beadopted.

The summary record creation and storage portion 90B references thecollection time data in the summary record in the performanceinformation VOL 47 and the summary definition information 33 in thedefinition VOL 49 and judges whether this is the timing for making anaddition summary of the summary record (S203). When an affirmativejudgment result is obtained in the processing in S203, the summaryrecord creation and storage portion 90B causes the performance recordcreation and storage portion 90A to start the processing of S201 for anadditional summary (S204).

The record deletion portion 90C references the deletion condition datain each summary record in the performance information VOL 47 and, ifthis point in time matches the deletion condition represented by thedeletion condition data (if the difference between the collection timeof the minute record and the current time is larger than the storagedeadline set as the deletion condition, for example), the recorddeletion portion 90C then deletes the summary record containing thisdeletion condition data (S105). The record deletion portion 90C is ableto perform the processing of S205 at regular intervals (or irregularintervals).

FIGS. 6A and 6B show an example of an aspect in which a deletioncondition for an upper level record representing an abnormal state isreflected in a lower level record. FIG. 6C shows a modified examplethereof. Further, in FIGS. 6A to 6C, the upper level record is an hourrecord and the lower level record is a minute record.

As shown in FIG. 6A, one of a plurality of minute records 13A2, 13A2, .. . , the collection time of which is the eleventh hour, is a minuterecord that represents an abnormal state and for which the storagedeadline ‘one month’ is set as a deletion condition. The storagedeadline ‘two hours’ is set as a deletion condition for another minuterecord that represents a normal state. The storage deadline ‘two days’is set as the storage condition in an hour record that represents anormal state.

In this case, for example, as shown in FIG. 6A, when the storagedeadline ‘7 days’ is set as the deletion condition in an hour recordrepresenting an abnormal state (a record the collection time of which is11 o'clock) 13B2, the summary record creation and storage portion 90Bdetects the fact that the collection time of the hour record 13B2 is 11o'clock and thus specifies the plurality of minute records 13A2, 13A2, .. . the collection times of which are in the eleventh hour from theperformance information VOL 47. Further, as shown in FIG. 6B, thesummary record creation and storage portion 90B rewrites deletioncondition data in the hour record 13B representing an abnormal statewith deletion condition data of each of the specified plurality ofminute records 13A2, 13A2, . . . irrespective of whether the minuterecord represents an abnormal state or a normal state.

Further, at such time, the summary record creation and storage portion90B is able to judge, for the deletion condition data of the minuterecords 13A2, 13A2 representing an abnormal state, which of a first timefor deleting a minute record in accordance with deletion condition dataand a second time for deleting a minute record in accordance withdeletion condition data in hour record 13B2 representing an abnormalstate is later and determine whether to perform rewriting in accordancewith the judgment result. More specifically, for example, the summaryrecord creation and storage portion 90B actually performs the rewritingshown in FIG. 6B when it is judged that the second time is later but,upon judging that the first time is later, retains the current deletioncondition data in the minute record representing an abnormal stateinstead of performing rewriting, as shown in FIG. 6C.

The data management system according to this embodiment was describedabove. According to this data management system, when an upper levelrecord that contains performance data representing an abnormal state isgenerated, content that is based on a deletion condition set in theupper level record is reflected in the deletion condition of at leastone lower level record that corresponds with the upper level record. Asa result, when a lower level record of summary data containingperformance data representing an abnormal state is to be acquired, asituation where the lower level record has been deleted and cannot beacquired can be prevented from occurring.

Further, the following modified examples of the above embodiment may beconsidered. The differences from the above embodiment will be mainlydescribed below.

FIG. 7 shows a modified example of the server program 12 according to anembodiment of the present invention as well as an example of the flow ofprocessing that is executed by the server program.

The record deletion portion 90C of the server program 12 can performprocessing not only to delete a record but also to shift a record.

In a case where, in the processing of S105 or S106 above, the recorddeletion portion 90 must delete at least one of an upper level recordthat represents an abnormal state and a plurality of lower level recordscorresponding with the upper level record from the performanceinformation VOL 47 due to conformity with the deletion conditions ofthese records, the upper level record containing normal performance dataand the plurality of lower level records corresponding with the upperlevel record respectively are deleted from the performance informationVOL 47 when there is conformity with the deletion conditions of suchrecords.

However, in cases where at least one of an upper level record containingabnormal performance data and a plurality of lower level recordscorresponding with the upper level record is deleted (Y in S106 or Y inS206), the record deletion portion 90 shifts the record of the deletiontarget in the performance information VOL 47 to another logical volume(S107). More specifically, the record deletion portion 90 deletes thedeletion target record from within the performance information VOL 47and writes the deletion target record to another logical volume. Whenthe performance information VOL 47 is provided in the performancemonitoring server 2, it may be considered desirable to provide anotherlogical volume constituting the writing destination in a storage deviceoutside the performance monitoring server 2. This spares the storageregion of the performance monitoring server 2.

Further, according to this modified example, it can be judged whetherperformance data contained in a record is abnormal or normal dependingon whether the deletion condition contained in the record is abnormal ornormal (for example, in FIGS. 6A to 6C, depending on whether ‘two days’has been set as the storage period or another storage period has beenset).

Moreover, according to this modified example, the record deletionportion 90 is able to determine another logical volume, whichconstitutes the migration destination, by referencing the a volumemanagement table 88 that is illustrated in FIG. 7. The volume managementtable 88 may be registered in the server memory portion 35 or in thestorage system 43. The ID, attribute, and usage status of each logicalvolume, for example, are registered in the volume management table 88.The attribute of the logical volume indicates in which type of storagedevice a logical volume is prepared. More specifically, for example,attributes include high reliability or high performance attributes(Fibre Channel, for example) and lower reliability or performanceattributes (serial ATA, for example), for example. The usage status ofthe logical volume may be in use or unused, for example. The recorddeletion portion 90 is able to select a logical volume that is in anunused state and of low reliability or low performance (or highreliability or high performance), for example as the other logicalvolume constituting the migration destination.

Embodiments and modified examples of the present invention have beendescribed hereinabove but constitute examples that serve to illustratethe present invention. There is no intention to limit the scope of thepresent invention to this embodiment and modified examples. The presentinvention can also be implemented in a variety of other forms.

1. A data management system that is capable of accessing a storagedevice, comprising: one or more processors; and a storage region forstoring one or more computer programs that allow the one or moreprocessors to operate as a result of being read by the one or moreprocessors, wherein the one or more processors, to which the one or morecomputer programs are read from the storage region, acquire, at a firstfrequency, monitoring result data that represents monitoring results fora monitoring target, generate a monitoring result record that includesthe monitoring result data thus acquired and first deletion conditiondata that represents a first deletion condition for the monitoringresult data, and store the generated monitoring result record in thestorage device; generate monitoring result summary data that representsa summary of a plurality of monitoring results represented by aplurality of the monitoring result record stored in the storage deviceat a second frequency that is lower than the first frequency, determinea second deletion condition for normal state when the content of thesummary of the plurality of monitoring results represents normal contentand determine a second deletion condition for abnormal state when thesummary content represents abnormal content, generate a summary recordthat includes second deletion condition data that represents the seconddeletion condition thus determined and the monitoring result summarydata thus generated, and then store the generated summary record in thestorage device; specify a summary record including second deletioncondition data representing the second deletion condition for abnormalstate from the storage device and specify a plurality of the monitoringresult records that form the basis of the generation of the specifiedsummary record; and update the first deletion condition that isrepresented by the first deletion condition data of each of theplurality of monitoring result records thus specified to a seconddeletion condition for abnormal state that is represented by the seconddeletion condition data included in the specified summary record.
 2. Adata management system that is capable of accessing a storage device,comprising: a lower level data acquisition/storage portion that acquireslower level data at a first frequency and stores the acquired lowerlevel data in the storage device; an upper level dataacquisition/storage portion that acquires upper level data that is dataabove each of a plurality of the lower level data stored in the storagedevice at a second frequency that is lower than the first frequency andstores the upper level data thus acquired in the storage device; a firstdeletion condition setting portion that, when the upper level datarepresents an abnormal state, sets a deletion condition from the storagedevice of the upper level data representing an abnormal state; and asecond deletion condition setting portion that sets a deletion conditionfor each of a plurality of lower level data corresponding with the upperlevel data representing an abnormal state as a deletion condition thatdiffers from the deletion condition of the lower level data representinga normal state, on the basis of the set deletion condition of the upperlevel data representing an abnormal state.
 3. The data management systemaccording to claim 2, wherein the deletion condition includes a deletiontime at which data is deleted from the storage device; the firstdeletion condition setting portion sets, as the deletion time of upperlevel data representing an abnormal state, a deletion time that is laterthan the deletion time of upper level data representing a normal state;and the second deletion condition setting portion sets the deletiontimes of each of the plurality of lower level data as deletion timesthat are later than the deletion times of the lower level datarepresenting a normal state.
 4. The data management system according toclaim 3, wherein the lower level data acquisition/storage portiongenerates a lower level record that includes second deletion time datarepresenting a second deletion time of the acquired lower level data andthe acquired lower level data and stores the lower level record thusgenerated in the storage device; the first deletion time setting portionsets a first deletion time for normal state that represents the deletiontime of the upper level data representing a normal state and sets afirst deletion time for abnormal state that represents the deletion timeof the upper level data representing an abnormal state; the upper leveldata acquisition/storage portion generates an upper level record thatincludes first deletion time data that represents the set first deletiontime and the acquired upper level data and stores the generated upperlevel record in the storage device; when the first deletion time data inthe upper level record represents the first deletion time for abnormalstate, the second deletion time setting portion changes the seconddeletion time represented by the second deletion time data of each ofthe plurality of lower level records corresponding with the upper levelrecord representing an abnormal state to a later deletion time on thebasis of the first deletion time for abnormal state.
 5. The datamanagement system according to claim 4, wherein, in certain lower leveldata among a plurality of lower level data corresponding with the upperlevel record representing an abnormal state, the second deletion timesetting portion keeps the second deletion time as is when the seconddeletion time represented by the second deletion time data is later thanthe first deletion time for abnormal state.
 6. The data managementsystem according to claim 2, wherein the data management system is alsoable to access another storage device and further comprises a datadeletion/shift portion that deletes or shifts data, wherein the datadeletion/shift portion deletes the upper level data representing anormal state and each of the plurality of lower level data correspondingwith the upper level data from the storage device when the deletionconditions of the data are matched, and shifts at least one of the upperlevel data representing an abnormal state and the plurality of lowerlevel data corresponding with the upper level data from the storagedevice to the other storage device when the deletion conditions of thedata are matched.
 7. A data management method, comprising the steps of:acquiring lower level data at a first frequency and storing the acquiredlower level data in a storage device; acquiring upper level data that isdata above each of a plurality of the lower level data stored in thestorage device at a second frequency that is lower than the firstfrequency and storing the upper level data thus acquired in the storagedevice; setting, when the upper level data represents an abnormal state,a deletion condition from the storage device of the upper level datarepresenting an abnormal state; and setting a deletion condition foreach of a plurality of lower level data corresponding with the upperlevel data representing an abnormal state as a deletion condition thatdiffers from the deletion condition of the lower level data representinga normal state, on the basis of the set deletion condition of the upperlevel data representing an abnormal state.
 8. The data management methodaccording to claim 7, comprising the steps of: setting, as the deletiontime of upper level data representing an abnormal state, a deletion timethat is later than the deletion time of upper level data representing anormal state; and setting the deletion times of each of the plurality oflower level data as deletion times that are later than the deletiontimes of the lower level data representing a normal state.
 9. The datamanagement method according to claim 8, comprising the steps of:generating a lower level record that includes second deletion time datarepresenting a second deletion time of the acquired lower level data andthe acquired lower level data and storing the lower level record thusgenerated in the storage device; setting a first deletion time fornormal state that represents the deletion time of the upper level datarepresenting a normal state and setting a first deletion time forabnormal state that represents the deletion time of the upper level datarepresenting an abnormal state; generating an upper level record thatincludes first deletion time data that represents the set first deletiontime and the acquired upper level data and storing the generated upperlevel record in the storage device; when the first deletion time data inthe upper level record represents the first deletion time for abnormalstate, changing the second deletion time represented by the seconddeletion time data of each of the plurality of lower level recordscorresponding with the upper level record representing an abnormal stateto a later deletion time on the basis of the first deletion time forabnormal state.
 10. The data management method according to claim 9,comprising the steps of: in certain lower level data among a pluralityof lower level data corresponding with the upper level recordrepresenting an abnormal state, keeping the second deletion time as iswhen the second deletion time represented by the second deletion timedata is later than the first deletion time for abnormal state.
 11. Thedata management method according to claim 7, comprising the steps of:deleting the upper level data representing a normal state and each ofthe plurality of lower level data corresponding with the upper leveldata from the storage device when the deletion conditions of the dataare matched; shifting at least one of the upper level data representingan abnormal state and the plurality of lower level data correspondingwith the upper level data from the storage device to the other storagedevice when the deletion conditions of the data are matched.
 12. Acomputer-readable computer program that allows a computer to execute thesteps of: acquiring lower level data at a first frequency and storingthe acquired lower level data in a storage device; acquiring upper leveldata that is data above each of a plurality of the lower level datastored in the storage device at a second frequency that is lower thanthe first frequency and storing the upper level data thus acquired inthe storage device; setting, when the upper level data represents anabnormal state, a deletion condition from the storage device of theupper level data representing an abnormal state; and setting a deletioncondition for each of a plurality of lower level data corresponding withthe upper level data representing an abnormal state as a deletioncondition that differs from the deletion condition of the lower leveldata representing a normal state, on the basis of the set deletioncondition of the upper level data representing an abnormal state.